Lucene search
K

103 matches found

RedhatCVE
RedhatCVE
added 2026/05/04 8:21 p.m.3 views

CVE-2026-7679

A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruoyi/common/oauth2/service/impl/OAuth2TokenServiceImpl.java. Performing a manipulation results in improper authentication...

7.5CVSS6.8AI score0.00105EPSS
Exploits0References1
CVE
CVE
added 2026/05/03 4:15 a.m.10 views

CVE-2026-7679

YunaiV yudao-cloud (up to 2026.01) is affected. The flaw resides in OAuth2TokenServiceImpl.java (getAccessToken) where manipulation leads to improper authentication. The issue is exploitable remotely with a PROOF-OF-CONCEPT exploit and no remediation details are provided in the available document...

7.5CVSS6.8AI score0.00105EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.8 views

MiracleLinux 7 : httpd-2.4.6-67.2.0.1.el7.AXS7 (AXSA:2017-2042:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2042:02 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. CVE-2017-3167 In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.2...

9.8CVSS7.3AI score0.64829EPSS
Exploits4References6
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.7 views

MiracleLinux 4 : httpd-2.2.15-60.5.0.1.AXS4 (AXSA:2017-1918:04)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1918:04 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. CVE-2017-3167 In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.2...

9.8CVSS7.3AI score0.49498EPSS
Exploits3References5
Tenable Nessus
Tenable Nessus
added 2025/07/31 12:0 a.m.3 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : SQLite vulnerabilities (USN-7679-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7679-1 advisory. It was discovered that SQLite incorrectly handled aggregate terms. An attacker could use this issue to cause SQLite t...

9.8CVSS7.7AI score0.01689EPSS
Exploits3References3
OpenVAS
OpenVAS
added 2025/07/31 12:0 a.m.1 views

Ubuntu: Security Advisory (USN-7679-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.01689EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.21 views

Linux Distros Unpatched Vulnerability : CVE-2017-7679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, modmime can read one byte past the end of a buffer when sending a malicious Content-Type response...

9.8CVSS7.7AI score0.30062EPSS
Exploits3References2
Tenable Nessus
Tenable Nessus
added 2024/10/11 12:0 a.m.13 views

Progress Telerik UI for WinForms < 2024.3.924 Command Injection

The version of Progress Telerik UI for WinForms installed on the remote host is prior to 2024.3.924. It is, therefore, affected by a vulnerability as referenced in the cve-2024-7679 advisory. - In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is...

7.8CVSS5.7AI score0.00187EPSS
Exploits0References2
Circl
Circl
added 2024/09/25 4:50 p.m.2 views

CVE-2024-7679

creationtimestamp| type| source ---|---|--- 2024-09-25 16:50:00+00:00| seen| https://t.me/cvedetector/6315 2025-02-08 23:20:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3899...

7.8CVSS5.7AI score0.00187EPSS
Exploits0References2
NVD
NVD
added 2024/09/25 2:15 p.m.7 views

CVE-2024-7679

In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

7.8CVSS0.00187EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/25 1:53 p.m.10 views

CVE-2024-7679 Improper neutralization special element in hyperlinks

In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

7.8CVSS7.4AI score0.00187EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/25 1:53 p.m.16 views

CVE-2024-7679 Improper neutralization special element in hyperlinks

In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

7.8CVSS0.00187EPSS
Exploits0References1
OSV
OSV
added 2023/08/31 12:14 p.m.3 views

BELL-CVE-2017-7679 CVE-2017-7679 does not affect BellSoft software

Bulletin has no description...

9.8CVSS7.3AI score0.30062EPSS
Exploits3References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.123 views

Security Bulletin: Vulnerabilities in HTTPD affect IBM BladeCenter Advanced Management Module (AMM)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in HTTPD. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in HTTPD. Vulnerability Details CVEID: CVE-2017-3167 Description:...

9.8CVSS9.6AI score0.64829EPSS
Exploits4
F5 Networks
F5 Networks
added 2023/02/21 6:48 p.m.220 views

K75429050: Apache HTTPD vulnerability CVE-2017-7679

Security Advisory Description In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, modmime can read one byte past the end of a buffer when sending a malicious Content-Type response header. CVE-2017-7679 Impact A remote attacker may exploit this vulnerability by using a malicious response...

9.8CVSS8.2AI score0.30062EPSS
Exploits3Affected Software16
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.42 views

Ubuntu: Security Advisory (USN-3373-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.5AI score0.64829EPSS
Exploits4References2
Circl
Circl
added 2022/02/18 4:23 p.m.0 views

CVE-2017-7679

creationtimestamp| type| source ---|---|--- 2022-02-18 16:23:37+00:00| seen| https://t.me/cyberdenteam/354 2022-06-01 15:53:21+00:00| seen| Telegram/oy0dbBE7nfsKRAHLSCKnQ1rQ2k7lu2BiCitRs7pe50X7S8 2023-11-28 14:32:19+00:00| seen| https://t.me/arpsyndicate/654 2025-10-21 21:00:05+00:00|...

9.8CVSS6.9AI score0.30062EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.49 views

Mageia: Security Advisory (MGASA-2018-0007)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.2AI score0.9384EPSS
Exploits17References7
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/23 1:45 a.m.60 views

Security Bulletin: Vulnerabilities in httpd affect Power Hardware Management Console

Summary httpd is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2017-9798 DESCRIPTION: Apache HTTP Server could allow a remote attacker to obtain sensitive information, caused by a flaw in the HTTP OPTIONS method, aka...

9.8CVSS0.8AI score0.9384EPSS
Exploits13Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.39 views

SUSE: Security Advisory (SUSE-SU-2017:2907-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.8AI score0.9384EPSS
Exploits26References10
Rows per page
Query Builder